Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/c21b6b08-7706-398f-83f1-168e28d2da7f.roa
File:                     c21b6b08-7706-398f-83f1-168e28d2da7f.roa (raw, json)
Hash identifier:          HBYDoTJp6Y1xrKrSLACtG54I7QJlaL4tRzDl5VQTeaY=
Subject key identifier:   84:E9:9C:63:FC:6F:1C:46:5D:87:18:0B:4A:F9:5C:A5:77:DC:70:9E
Certificate issuer:       /CN=60048b5a-2ca8-4251-8e93-5eaab72d4cc3
Certificate serial:       010D0C9F43285849393E95386CB9A63709237D80
Authority key identifier: 26:B3:71:D8:2E:D3:02:50:9E:82:C5:F0:AB:9E:E5:53:DD:3F:ED:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/c21b6b08-7706-398f-83f1-168e28d2da7f.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     17138
IP address blocks:        2602:803:9000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:95:38:6c:b9:a6:37:09:23:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60048b5a-2ca8-4251-8e93-5eaab72d4cc3
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=c7d1aba7-6a1e-469f-8c14-6025bb9e675f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:55:c0:a4:27:38:1f:5f:54:44:fe:65:ca:d3:
                    1b:06:b2:81:bc:94:46:10:4c:21:28:f3:3f:02:81:
                    b2:f6:99:c8:db:88:7c:4c:16:de:ab:5f:23:d1:2f:
                    e7:83:3b:34:7d:54:60:78:ae:6e:66:dd:ac:21:61:
                    d7:3e:32:57:38:8a:e3:77:25:88:e9:8a:9f:6c:34:
                    ad:4a:44:3f:03:44:68:cd:cd:a9:98:b6:8d:02:e6:
                    f6:58:77:5e:dc:e8:72:51:d6:b1:59:57:f6:5c:ee:
                    32:b4:d6:34:90:64:a0:ae:ed:b5:30:21:c6:97:d3:
                    71:c8:df:53:4d:68:da:c9:de:92:ed:9a:16:5d:19:
                    61:90:b7:44:1d:93:91:19:4c:b7:f0:6c:1f:9e:e9:
                    02:ef:9a:66:aa:eb:13:83:0f:0c:ee:03:9f:21:33:
                    9f:62:14:a9:10:14:90:4f:c7:f6:ea:6e:aa:43:54:
                    20:9a:95:6f:b1:8d:52:f8:88:36:12:23:eb:37:00:
                    0f:ba:17:bc:28:88:a6:e0:75:82:93:4c:9e:f4:30:
                    77:00:e5:6e:c2:31:8a:78:40:7d:68:b5:1f:8b:b7:
                    1a:53:e7:f1:ea:2b:25:75:d8:d7:18:c8:eb:2e:41:
                    6c:3e:6b:2a:bf:7b:4f:a1:89:de:4a:43:cb:e6:f2:
                    24:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E9:9C:63:FC:6F:1C:46:5D:87:18:0B:4A:F9:5C:A5:77:DC:70:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/c21b6b08-7706-398f-83f1-168e28d2da7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.crl

            X509v3 Authority Key Identifier:
                keyid:26:B3:71:D8:2E:D3:02:50:9E:82:C5:F0:AB:9E:E5:53:DD:3F:ED:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:803:9000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:ca:a2:eb:7a:d0:60:62:e4:73:ec:33:ab:bc:8f:ff:86:38:
         dd:a8:c4:a5:49:31:f8:ee:5e:73:6e:a4:8f:fa:1d:b7:32:a1:
         45:2f:d4:2b:15:60:d7:1a:8c:af:ce:1c:8f:e1:fe:33:3d:19:
         40:d6:4b:46:a4:1e:5e:7e:61:30:da:f5:48:b9:41:59:8c:98:
         62:fa:13:f7:3e:fb:d6:65:d7:ec:a9:02:50:28:1e:8a:66:72:
         2b:ca:42:31:db:be:26:60:53:c4:86:e4:fe:4f:fd:ee:da:6e:
         68:c1:c6:95:62:5f:b1:17:5a:4f:db:c3:11:d3:ae:56:72:90:
         84:07:36:fc:26:89:40:a0:0d:1a:c5:3d:88:24:09:02:4d:44:
         fd:5f:f7:cd:ad:ee:5d:12:91:33:67:69:fe:7a:b9:b2:0c:7c:
         3d:eb:c8:57:03:8a:e1:e5:38:16:3a:c4:57:a5:2e:c1:d0:59:
         fd:c3:ea:e3:78:8b:f0:bc:93:cf:ee:5a:26:2b:41:db:0f:32:
         0d:24:46:d5:bd:b6:b4:88:09:1f:59:39:7a:e8:fc:08:ee:a7:
         97:4d:fa:d7:41:a9:8f:a6:4e:2f:dc:19:3f:9e:a0:60:04:58:
         31:0a:ec:4a:ef:ed:3b:26:fb:95:c6:b8:af:3c:3c:bc:88:44:
         72:68:62:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----